class backup::params {
  # backup folder
  $backupdir        = "/var/backups"
  $backupdir_remote = "$backupdir/remote"
  $backupdir_users  = "$backupdir/users"
  $backupdir_ensure = hiera('backup::dir::ensure', 'directory')

  # for data that's going to be encrypted and signed
  $include_unencrypted = [ "/etc", "/var", "/home", "/root" ]
  $exclude_unencrypted = [ "$backupdir_remote", "$backupdir/duplicity", "$backupdir/borg", "$backupdir/restore", "/var/cache", "/var/log", "/var/vservers", "/var/chroot", "/root/.cache", "/var/lib/dpkg", "/var/lib/apt", "/var/lib/aptitude/", "/var/sites/backups", "/var/data/crypt", "/var/data/backups", "/var/data/cache" ]

  # for data that were previously encrypted and signed
  $include_encrypted = [ "$backupdir/duplicity", ]
  $exclude_encrypted = [ "$backupdir/duplicity/.ssh", ]

  # ensure the latest backup version
  $backupninja_ensure_version = 'latest'
}